Cybersecurity GRC Consultant (Mid/Senior)

Are you a Cybersecurity GRC Consultant? Think bigger about your next move! Build your future with QnR Group. JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE 🚀 Cybersecurity GRC Consultant | Syste. Com, member of QnR Group Role overview We are looking for a Cybersecurity GRC Consultant to help organisations translate cybersecurity obligations and business risks into workable governance, policies, controls and improvement roadmaps.

About QnR Group QnR Group is a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities covers software engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and Service.

Now solutions, core banking and maritime intelligence. About Syste. Com Syste. Com, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments.

Bringing together security and infrastructure expertise, Syste. Com supports businesses across sectors in building secure, reliable and resilient digital operations.

Requirements

Conduct gap assessments, maturity reviews and control evaluations Develop policies, standards, risk-treatment plans and governance reports Support NIS2, DORA, ISO/IEC 27001 and related compliance initiatives Coordinate evidence, audits, remediation actions and stakeholder reporting At senior levels, advise leadership on cybersecurity strategy and governance What you bring: Experience in cybersecurity governance, risk, compliance, audit, information-security management or advisory work Detailed knowledge of ISO/IEC 27001 and familiarity with NIST CSF, CIS Controls or comparable frameworks Practical experience conducting gap assessments, maturity reviews, control evaluations or audit-readiness activities Ability to interpret NIS2, DORA and other applicable obligations and convert requirements into proportionate controls and evidence Strong policy, procedure, report and roadmap drafting skills Ability to facilitate workshops, interview stakeholders and communicate findings to technical and executive audiences Understanding of ISMS operation, risk treatment, statements of applicability, corrective actions and control ownership For senior candidates, experience defining governance models, advising leadership and leading multi-workstream compliance programmes Required certifications: Mid-level and Senior: at least one professional certification, such as CISM, CISA, CRISC, ISC2 CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent Nice to have: CISM, CISA, CRISC, CGRC, ISO/IEC 27001 Lead Implementer/Auditor or equivalent Experience in regulated or public-sector environments Third-party-risk assignments may additionally require a recognised vendor-risk, audit or privacy certification